- Original Message -
> From: "Kevin Oberman"
> To: "Franck Martin"
> Cc: "Jeroen van Aart" , "NANOG list"
> Sent: Tuesday, 23 November, 2010 12:31:47 PM
> Subject: Re: IPv6 6to4 and dns
> > Date: Sat, 20 Nov 2010 09:36:28 +1300 (FJST)
> > From: Franck Martin
> >
> > I use HE.NET in a
On 11/22/2010 07:47 PM, Wil Schultz wrote:
> The more I think about this COICA deal the more I can't even fathom
> how it could be implemented.
>
> If an upstream server won't resolve, what's to stop a network admin
> from using an offshored DNS server, or even the root servers?
The way I read it
On Fri, Nov 19, 2010 at 08:14, Scott Morris wrote:
> If 8 bits is a byte, then 16 bits should be a mouthful.
>
> ;)
>
> Scott
>
>
If we can't choose mouthful (which for some reason sounds thematically
correct), "chunk" gets my vote.
*(Chunk = Maybe not the most technical, but has been working for
The more I think about this COICA deal the more I can't even fathom how it
could be implemented.
If an upstream server won't resolve, what's to stop a network admin from using
an offshored DNS server, or even the root servers?
Unless we're talking about keeping DNS traffic confined to the ISP'
> From nanog-bounces+bonomi=mail.r-bonomi@nanog.org Fri Nov 19 14:18:02
> 2010
> Date: Fri, 19 Nov 2010 12:19:34 -0800
> From: Joel Jaeggli
> To: Owen DeLong
> Subject: Re: Introducing draft-denog-v6ops-addresspartnaming
> Cc: bmann...@vacation.karoshi.com, nanog@nanog.org
>
> On 11/19/10 1
On Nov 22, 2010, at 10:48 PM, Joe Abley wrote:
> I guess if the manner of the interception was to send back SERVFAIL to DNS
> clients whose queries were (in some sense) objectionable, the result would be
> that the clients were not able to resolve the (in some sense) bad names.
Quantifying th
> From nanog-bounces+bonomi=mail.r-bonomi@nanog.org Fri Nov 19 11:05:33
> 2010
> Subject: Re: Introducing draft-denog-v6ops-addresspartnaming
> From: Owen DeLong
> Date: Fri, 19 Nov 2010 08:58:45 -0800
> To: Richard Hartmann
> Cc: bmann...@vacation.karoshi.com, nanog@nanog.org
>
>
> On Nov
On 22/11/2010 22:56, Tassos Chatzithomaoglou wrote:
Does "service counters max age" help in any way?*
*According to Cisco, setting it too low might upset the snmp counters.*
https://www.cisco.com/en/US/docs/ios/fundamentals/command/reference/cf_r1.html#wp1067159
The "Usage Guidelines" are in
> Date: Sat, 20 Nov 2010 09:36:28 +1300 (FJST)
> From: Franck Martin
>
> I use HE.NET in a few installations (with BGP) and they have good support
> (which is quite awesome for a free service).
>
> As people pointed out avoid 6to4, Apple just rendered it nearly useless in
> its latest OS-X.
>
See man inet.
All numbers supplied as ``parts'' in a `.' notation may be decimal,
octal, or hexadecimal, as specified in the C language (i.e., a leading 0x
or 0X implies hexadecimal; otherwise, a leading 0 implies octal; other-
wise, the number is interpreted as decimal).
Not
On Mon, Nov 22, 2010 at 14:05, Richard Hartmann
wrote:
> I will add quad to -03 anyway. If you get a few +1 on hexquad, I am
> against adding that, as well.
Erm. Belated, but I am _not_ against adding etc pp.
Richard
Does "service counters max age" help in any way?*
*According to Cisco, setting it too low might upset the snmp counters.*
*
--
Tassos
Jon Lewis wrote on 23/11/2010 00:19:
On Mon, 22 Nov 2010, Brandon Ross wrote:
On Mon, 22 Nov 2010, Nick Hilliard wrote:
some do, some don't. For example, s
On Friday, November 19, 2010 08:14:52 am Scott Morris wrote:
> If 8 bits is a byte, then 16 bits should be a mouthful.
I thought the Jargon File settled that long ago: 4 bits = nybble, 8 bits =
byte, 16 bits = playte, 32-bits = dynner. See http://dictionary.die.net/nybble
Since the zeros betwee
On Mon, Nov 22, 2010 at 18:33, Daniel Hagerty wrote:
> Ambiguating usages like "Take the least signifigant quad of that
> ipv6 address" to mean either 16 bits or 64 bits, when it currently is
> unamibigously 64 bits won't make the lives of C/C++ programmers
> writing IPv6 code any easier.
Agr
On Mon, Nov 22, 2010 at 12:56:00PM -0700, Matlock, Kenneth L wrote:
> 'Octal' (Base-8) :)
>
> The leading '0' is telling the box to interpret it as octal instead of
> decimal or hex.
My guess you're seeing an interface that uses inet_addr() instead
of inet_pton(); the latter is used more nowadays
On Mon, 22 Nov 2010, Brandon Ross wrote:
On Mon, 22 Nov 2010, Nick Hilliard wrote:
some do, some don't. For example, sup720 snmp counters are updated every 9
seconds, while the "show interface" counters are updated every 30 seconds.
That is most certainly NOT true. The 'show interface' cou
0 as a leading digit on an integer indicate octal...
010 octal is 8 decimal.
Owen
On Nov 22, 2010, at 11:52 AM, Greg Whynott wrote:
>
> i was pinging a host from a windows machine and made a typo which seemed
> harmless. the end result was it interpreted my input differently than what I
> h
On Mon, Nov 22, 2010 at 16:23, Owen DeLong wrote:
> then, the other ISPs
> will eventually find themselves at a competitive disadvantage as their
> customers start to ask "Why can't I have a /48 like my friend Bob
> got from provider Z?"
I kinda implied that, but yes, I should have written it ou
On Mon, Nov 22, 2010 at 3:09 PM, Michael Brown wrote:
> On 11/22/2010 02:58 PM, Steven Bellovin wrote:
>> 010 is how C represents an octal number. This one is known in decimal as 8.
> Obviously, what Greg meant to type was:
> $ ping 012.0xA.10.1
> PING 012.0xA.10.1 (10.10.10.1) 56(84) bytes of da
Well, on the RSP720, the "show interface" byte counters are definitely not
every second, though I can't say it's been as long as 9 seconds. I
typically look at them while making changes and they definitely stand still
for a few seconds.
Frank
-Original Message-
From: Brandon Ross [mailto
Problem solved. The culprit turned out to be a Cogent router in Dallas.
Many thanks to Jason Beasley from XO for helping out with
troubleshooting and escalating the issue.
* Tore Anderson
> I'm seeing blackholing on my inbound traffic from XO and their
> downstreams (notably CNN) via Cogent. P
On 11/22/2010 02:58 PM, Steven Bellovin wrote:
> 010 is how C represents an octal number. This one is known in decimal as 8.
Obviously, what Greg meant to type was:
$ ping 012.0xA.10.1
PING 012.0xA.10.1 (10.10.10.1) 56(84) bytes of data.
M.
--
Michael Brown | The true sysadmin does
On Nov 21, 2010, at 4:31 PM, Cameron Byrne wrote:
> On Thu, Nov 18, 2010 at 3:17 PM, Cameron Byrne wrote:
>> On Thu, Nov 18, 2010 at 2:44 PM, Mike Tancsa wrote:
>>> On 11/18/2010 5:14 PM, Lee Riemer wrote:
Try tracerouting to 2001:500:4:13::81 (www.arin.net) or
2001:470:0:76::2 (www.h
Would a mail-op from id.apple.com please contact me off-list?
thanks guys. I should of paid more attention in school.
interesting cisco understands what we meant. 8)
-g
On Nov 22, 2010, at 2:56 PM, Matlock, Kenneth L wrote:
> 'Octal' (Base-8) :)
>
> The leading '0' is telling the box to interpret it as octal instead of
> decimal or hex.
>
> Ken Matloc
On Nov 22, 2010, at 2:52 52PM, Greg Whynott wrote:
>
> i was pinging a host from a windows machine and made a typo which seemed
> harmless. the end result was it interpreted my input differently than what I
> had intended. thinking this was a m$ issue I quickly took the opportunity
> to po
On Nov 22, 2010, at 11:52 AM, Greg Whynott wrote:
anyone happen to know how the OS's are interpreting the 010?
doesn't appear work out in base[2-10]
(1010,101,22,20,14,13,12,11,10,A)
Looks base 8 to me.
-j
'Octal' (Base-8) :)
The leading '0' is telling the box to interpret it as octal instead of
decimal or hex.
Ken Matlock
Network Analyst
Exempla Healthcare
(303) 467-4671
matlo...@exempla.org
-Original Message-
From: Greg Whynott [mailto:greg.whyn...@oicr.on.ca]
Sent: Monday, November 22
Prefixing the octet with 0 makes it interpret it as octal, not decimal.
Pretty typical on a UNIX system.
On 11/22/2010 2:52 PM, Greg Whynott wrote:
i was pinging a host from a windows machine and made a typo which seemed
harmless. the end result was it interpreted my input differently than wh
i was pinging a host from a windows machine and made a typo which seemed
harmless. the end result was it interpreted my input differently than what I
had intended. thinking this was a m$ issue I quickly took the opportunity to
poke fun at windows as the senior m$ admin was near by.
"look at
On 11/22/10 10:34 AM, Deric Kwok wrote:
> Hi
>
> I read switch that supports PIM / ESRP / VRRP
I assume you don't mean extreme standby routing protocol, if you do then
you have your answer, you future is purple.
> What are they?
Most decent layer3 switch platforms will support PIM/VRRP.
> Than
Hi
I read switch that supports PIM / ESRP / VRRP
What are they?
Thank you
Given that a meal is often comprised of several mouthfuls, wouldn't it
stand to reason that the entire address would suffice there? ;)
Scott
On 11/19/10 11:06 AM, Richard Hartmann wrote:
> On Fri, Nov 19, 2010 at 14:14, Scott Morris wrote:
>
>> If 8 bits is a byte, then 16 bits should be a mou
We have had Cogent and recently added TWC (not TWT) and have had no
problems. We still see the majority of our IPv6 traffic go though the
NOX (I2), though.
On Thu, Nov 18, 2010 at 4:39 PM, Nick Olsen wrote:
> Curious as to who is running IPv6 with TW Telecom or Cogent.
> I'm wanting to turn up n
On Mon, Nov 22, 2010 at 1:46 PM, Matt Disuko wrote:
> It seems the subdomain "shop.starwars.com" is being redirected.
> Anybody else seeing this?
The Rebel Alliance managed to hit that site, but the Empire struck
back and it's back online again.
Rubens
On 11/22/10 9:05 AM, Ken Chase wrote:
>
> That phishers manage to fake sites that look wrong is also beyond me, what's
> so hard about 'save page as'?
>
Probably because there's no need to try that hard - they'll catch enough
people no matter how crappy the phish.
~Seth
One of the best active measurement products is the BRIX monitoring
system, now owned by EXFO. Active measurement systems have the
capability of sending out emulated application probes (for instance
G.711 calls), or alternatively simple ping tests to gather round trip
times (RTT), jitter, and packet
Richard Hartmann writes:
> I will add quad to -03 anyway. If you get a few +1 on hexquad, I am
> against adding that, as well.
Quad is a standard term for "64 bit integer" in C/C++. For
example:
$ grep -c quad /usr/src/sys/netinet6/*|awk -F: '{tot+=$2} END{print tot}'
171
which is to
I'm surprised by the sequence of events here..
domain "novator2.com" is registered with DomainsAtCost.ca.
domain "novator2.com" expires...
gets picked up by the administrators of "yourdomainhasexpired.com" - Rebel.com?
1550507.ca?
;; ANSWER SECTION:
shop.starwars.com. 1655IN CN
On Mon, 22 Nov 2010 16:59:54 +0200, Kasper Adel said:
> Breaking it down [high level] for me sounds like : (suggestions are more
> than welcomed) :
>
> 1) Looking at hardware computation finite resources (cpu, memory...etc)
> 2) Looking at available bandwidth
> 3) QoS policy
> 4) High Availability
On Mon, 22 Nov 2010, Nick Hilliard wrote:
On 22/11/2010 14:02, Brandon Ross wrote:
That is most certainly NOT true.
You're correct that I'm mistaken. It's 9 second updates for both snmp and
the interface (packets / bytes) counters, at least on 6700 cards / SXI. Are
you getting different me
On Mon, Nov 22, 2010 at 08:49:48AM -0800, Wil Schultz said:
>Appears that it's a CNAME for shop.starwars.novator2.com.
>
>The expiry day is 11/22/2011, so if I were to guess I would think that the
domain expired, sent to an advert page, and was just renewed.
>
>-wil
Smartest attack is
Yep, that's it. My nameserver is caching the old advert site that was serving
up when the domain expired:
;; ANSWER SECTION:
shop.starwars.com. 1652IN CNAME shop.starwars.novator2.com.
shop.starwars.novator2.com. 1652 IN A 74.54.152.75
;; AUTHORITY SECTION:
novator2.c
Appears that it's a CNAME for shop.starwars.novator2.com.
The expiry day is 11/22/2011, so if I were to guess I would think that the
domain expired, sent to an advert page, and was just renewed.
-wil
On Nov 22, 2010, at 7:46 AM, Matt Disuko wrote:
>
> It seems the subdomain "shop.starwars.c
On Mon, Nov 22, 2010 at 8:46 AM, Matt Disuko wrote:
>
> It seems the subdomain "shop.starwars.com" is being redirected.
>
> Anybody else seeing this?
>
Redirected to where? Looks like it is working as expected...?
--Jaren
I'm not sure if Wireshark will let you do this...at least with TCP, we
do use Wireshark to analyze RTP traffic which provides jitter/loss data,
maybe a vendor provided LAN analyzer would provide this information
I still think you're better of on using some type of tools and do the
measurement
> It seems the subdomain "shop.starwars.com" is being redirected.
>
> Anybody else seeing this?
HTML served up looks official, albeit different NS servers and IP Range
from main site.
Resolves to 209.20.19.60 (shop.starwars.novator2.com.). Couldn't tell
you if that's where it's "meant" to go mind
On Mon, Nov 22, 2010 at 15:07, William Herrin wrote:
> Trimming zeros on both the left and the right, as the correctly
> written IPv6 notation "1::/16" would have us do, is confusing. It's
> like writing one million and one tenth as "1,,.1" instead of
> "1,000,000.1".
No, there are simply two me
Hi Bret,
These guys are not looking for measuring traffic generated by a tool, they
want to measure what they have running now (not only Voice). I am not sue if
measuring what they have or generating traffic and measuring it is the same
thing. what do u think?
thanks,
Kim
On Mon, Nov 22, 2010 at
On 2010-11-22, at 10:35, Curtis Maurand wrote:
> And where would the list that we need to block be gotten from?
bittorrent? :-)
On 22/11/2010 14:02, Brandon Ross wrote:
That is most certainly NOT true.
You're correct that I'm mistaken. It's 9 second updates for both snmp and
the interface (packets / bytes) counters, at least on 6700 cards / SXI.
Are you getting different measurements?
Nick
On Nov 22, 2010, at 7:25 AM, Joe Abley wrote:
>
> On 2010-11-22, at 00:00, Jeffrey Lyon wrote:
>
>> Indeed, offshore resolvers, offshore DNS infrastructure and the
>> progressive's futile attempts at interference with free markets is
>> once again thwarted. We all know that U.S. law helps keep
Most VoIP solutions are RTP whether internal or via SIP solution from a
service provider.
On 11/22/2010 10:04 AM, Kasper Adel wrote:
Sorry i forgot to add more detail.
We are not looking for IP Telephony type of voice but RTP from Media
Gateways.
Cheers,
Kim
On Mon, Nov 22, 2010 at 4:59 PM,
Iperf can be used to measure jitter and delay as well as simulate a
quasi VoIP call. You can also use mtr under Linux which provides jitter
and delay measurements from one point to another point. A g.729 call
(lower quality) takes about ~40kbps and a g.711 (high quality) used
about ~100Kbps of
On 2010-11-22, at 10:43, Joe Greco wrote:
> It's funny, isn't it, didn't we just finish convincing the government
> of the need for DNSSEC, making the DNS system more resistant to some
> forms of tampering?
I guess if the manner of the interception was to send back SERVFAIL to DNS
clients whose
It seems the subdomain "shop.starwars.com" is being redirected.
Anybody else seeing this?
> You don't think
>
> "(i) a service provider, as that term is defined in section 512(k)(1) of =
> title 17, United States Code, or other operator of a domain name system =
> server shall take reasonable steps that will prevent a domain name from =
> resolving to that domain name=92s Internet prot
On 11/22/2010 10:25 AM, Joe Abley wrote:
You don't think
"(i) a service provider, as that term is defined in section 512(k)(1) of title 17,
United States Code, or other operator of a domain name system server shall take
reasonable steps that will prevent a domain name from resolving to that d
On 2010-11-22, at 00:00, Jeffrey Lyon wrote:
> Indeed, offshore resolvers, offshore DNS infrastructure and the
> progressive's futile attempts at interference with free markets is
> once again thwarted. We all know that U.S. law helps keep the internet
> safe
You don't think
"(i) a service pro
>
>> I don't see a problem with people not assigning customers /56s so long
>> as they go in the correct direction and give /48s and not /60s or /64s.
>
> Many ISPs will end up handing their customers /64, /62 or other
> less-than-ideal prefixes. As soon as a customer needs to subnet their
> /64,
Yes, I was able to reach Tata (they actually have done something very good I
encourage
others to follow, see below) and they resolved the issue within 15 minutes of
my phone
call.
What Tata has done with as6453.net is that there is a website there which
provides
NOC contact info and the phone i
Sorry i forgot to add more detail.
We are not looking for IP Telephony type of voice but RTP from Media
Gateways.
Cheers,
Kim
On Mon, Nov 22, 2010 at 4:59 PM, Kasper Adel wrote:
> Hi,
>
> My customer would like to add VoIP over their network and they asked us for
> an audit. the result of the
Hi,
My customer would like to add VoIP over their network and they asked us for
an audit. the result of the audit would be simply "you guys are ready for
it"
Breaking it down [high level] for me sounds like : (suggestions are more
than welcomed) :
1) Looking at hardware computation finite resour
On Mon, Nov 22, 2010 at 6:40 AM, Richard Hartmann
wrote:
> On Sun, Nov 21, 2010 at 16:54, William Herrin wrote:
>> Because in my version fd::/8
>> actually is the same as fd00::/8, which, as you rightly point out, is
>> exactly what a normal human being would naturally expect.
>
> Which is agains
On Mon, 22 Nov 2010, Nick Hilliard wrote:
some do, some don't. For example, sup720 snmp counters are updated every 9
seconds, while the "show interface" counters are updated every 30 seconds.
That is most certainly NOT true. The 'show interface' counters update at
least once a second. Perh
For the sake of completeness, the relevant part of what I answered
privately can be found below.
On Mon, Nov 22, 2010 at 13:22, Jeff Aitken wrote:
> [ Meant to send this to the list and not directly to Richard. ]
>
> On Fri, Nov 19, 2010 at 03:07:40AM +0100, Richard Hartmann wrote:
>> If any of y
[ Meant to send this to the list and not directly to Richard. ]
On Fri, Nov 19, 2010 at 03:07:40AM +0100, Richard Hartmann wrote:
> If any of you have any additional suggestions, you are more than
> welcome to share them.
I heard "hexquad" somewhere awhile back and have been using it since...
lo
On 22/11/2010 10:47, Livio Zanol Puppim wrote:
Good to know. It such a dificult information to find in documentation.
I should have wrapped up that statement with a ymmv. Because probably,
your mileage will vary.
Nick
Please don't group several emails into one. It breaks threads. And
while I could not find anything about this in the NANOG FAQ, it's
common netiquette not to do so.
On Sun, Nov 21, 2010 at 23:50, William Herrin wrote:
> On Sun, Nov 21, 2010 at 11:40 AM, Joel Jaeggli wrote:
> Looks like an ass-u
On Sun, Nov 21, 2010 at 23:15, Owen DeLong wrote:
> In fact, it would look pretty weird to most people if we started writing
> 951-21-42-33 (or I bet they wouldn't expect that was a zip code in
> any case). Similarly, if we start placing the separators in arbitrary
> places in phone numbers, peop
On Sun, Nov 21, 2010 at 16:54, William Herrin wrote:
> Because in my version fd::/8
> actually is the same as fd00::/8, which, as you rightly point out, is
> exactly what a normal human being would naturally expect.
Which is against every expectation of anyone who ever learned Arabic
numbers in a
On Sat, Nov 20, 2010 at 23:15, Owen DeLong wrote:
You seem to be indirectly answering the parent posting in much of what
you say. That is fine, I just wanted to point it out.
> > It's a commonly accepted, well-defined convention to save humans
> > effort while not sacrificing readability. There
Good to know. It such a dificult information to find in documentation.
2010/11/22 Nick Hilliard
> On 22/11/2010 10:00, Sergey Voropaev wrote:
>
>> I'm sure that router updates its counter more often than 5 seconds.
>>
>
> some do, some don't. For example, sup720 snmp counters are updated every
On 22/11/2010 10:00, Sergey Voropaev wrote:
I'm sure that router updates its counter more often than 5 seconds.
some do, some don't. For example, sup720 snmp counters are updated every 9
seconds, while the "show interface" counters are updated every 30 seconds.
Nick
IT depends on the manufacturer. Cisco can updates OIDs even on 1 second time
basis (maybe less?).
A long time ago I've made an "real time monitor" to troubleshooting problems
at the WAN. IT was not a NMS, only visual graphs using PHP and RRDtool in
one page showing IfOctests, IfDiscards, IfErrors,
Steinar,
I'm sure that router updates its counter more often than 5 seconds.
On 22 November 2010 12:46, wrote:
> > Does any one know the NMS (network management software) which can do the
> > fallowing:
> >
> > 1. Monitor on Cisco Routers/Switches interface utilization every 5-10
> > seconds a
Hi list,
I'm seeing blackholing on my inbound traffic from XO and their
downstreams (notably CNN) via Cogent. Prepending towards Cogent changes
my inbound path from 2828 174 39029 to 2828 3549 3292 39029 and it
works fine, even though the outbound path is still via Cogent:
t...@cr3> traceroute 2
> Does any one know the NMS (network management software) which can do the
> fallowing:
>
> 1. Monitor on Cisco Routers/Switches interface utilization every 5-10
> seconds and send e-mail alarm when utilization low or high of predefined
> thresholds.
> 2. Collect net-flow statistics (at least src/
Does any one know the NMS (network management software) which can do the
fallowing:
1. Monitor on Cisco Routers/Switches interface utilization every 5-10
seconds and send e-mail alarm when utilization low or high of predefined
thresholds.
2. Collect net-flow statistics (at least src/dst) with gran
> Anyone else seeing problems reaching AT&T/XO possibly others from
> AS6453 in Europe?
Seems to work okay from Norway:
traceroute to 140.239.191.10 (140.239.191.10), 64 hops max, 40 byte packets
1 ge0-0-0-3000.br1.fn3.no.catchbone.net (193.75.4.1) 0.165 ms 0.179 ms
0.235 ms
2 if-6-0-0.co
80 matches
Mail list logo